Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File:                     pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier:          qyIbFEO/erSwnotGdXy5fC9PkDjPU3FRYc9z7qBz2T0=
Subject key identifier:   EC:97:14:AF:68:98:C4:3D:1F:B0:76:73:29:88:1D:1C:A9:F7:29:0E
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer:       /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial:       019748C30727171EBA5612B6E277EB1B26BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number:          0DC4
Signing time:             Sat 07 Jun 2025 05:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:30 +0000
Files and hashes:         1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: ZMs56IV4B9uL+7XV/WWTlmxWnIxprMBiJd3d1enr8WE=)
                          2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:07:27:17:1e:ba:56:12:b6:e2:77:eb:1b:26:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
        Validity
            Not Before: Jun  7 05:00:30 2025 GMT
            Not After : Jun  8 05:00:30 2025 GMT
        Subject: CN=ec9714af6898c43d1fb0767329881d1ca9f7290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:07:8c:b5:fa:32:6b:bc:d7:e8:ac:9e:14:
                    c8:68:a4:d8:c5:d2:4e:09:64:6f:0e:2f:4b:53:30:
                    41:53:e5:bf:b8:89:e5:83:08:8c:21:ef:e6:e1:18:
                    82:eb:60:ba:56:a9:45:e8:64:8a:cd:a7:37:3d:ee:
                    50:13:48:5c:33:f6:c3:03:fb:e2:3b:ad:3b:cf:09:
                    5d:58:44:8e:46:b5:e9:76:f5:1a:0f:80:6e:75:7c:
                    50:9d:66:b1:a2:cd:02:f5:89:6a:4b:e9:e3:bb:8b:
                    d1:1a:3c:d3:48:bc:53:aa:78:4f:12:a5:18:26:de:
                    08:e5:b8:8a:88:c8:e4:7a:48:1f:ab:95:06:c2:c4:
                    c8:c1:88:d1:a7:ab:70:6e:72:f7:ba:c9:90:8f:60:
                    74:b2:0f:00:39:fc:4c:6f:50:1b:b7:3c:09:97:ff:
                    7e:1d:42:e6:44:e9:58:7d:83:a9:1b:49:ff:b2:0d:
                    78:75:86:58:11:a7:8e:34:35:0a:41:31:02:85:df:
                    de:05:31:b8:41:8b:05:87:dd:47:93:af:38:05:b3:
                    47:b5:ac:b7:7a:83:9d:68:95:71:ea:19:68:a2:a3:
                    c4:55:b8:10:7c:f1:b8:d4:dd:e3:4a:2c:42:24:df:
                    50:79:3f:3a:dd:6a:ea:f5:81:70:88:9f:2b:1a:b1:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:14:AF:68:98:C4:3D:1F:B0:76:73:29:88:1D:1C:A9:F7:29:0E
            X509v3 Authority Key Identifier:
                keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:33:4f:c0:8e:63:21:a1:a8:4c:39:71:98:fd:95:b7:2f:
         1d:0d:6c:be:f1:3c:c1:3a:21:05:2c:d5:a2:7e:72:78:a9:98:
         6b:b8:4a:fb:aa:d3:eb:71:6f:e7:d9:14:df:b6:73:8a:b3:e7:
         f0:ab:8e:4b:bb:bf:ec:c7:c5:0d:a4:31:a1:62:0e:c3:69:0f:
         32:8a:f7:7e:42:c9:38:35:b9:79:fa:60:11:80:ae:92:f7:d0:
         4e:90:2b:d4:5e:3f:f2:7d:3d:fe:ed:85:bd:76:33:14:7d:0e:
         ff:46:27:4b:6e:9b:29:a5:78:2a:07:1f:01:54:ee:00:26:63:
         2f:5b:a4:67:e1:6c:52:ff:26:b1:88:1d:e7:52:3e:7e:f0:d9:
         c2:3b:93:98:0f:40:a3:10:0e:99:76:88:61:21:67:fb:23:f9:
         ac:1e:d2:48:4d:e4:79:40:2a:af:1d:83:1c:5e:bd:3d:6d:a5:
         83:37:47:52:02:47:d3:fb:4d:e6:23:b7:37:ce:a0:6d:4a:02:
         19:70:bb:97:ce:18:87:e7:d9:c4:bf:00:ab:a1:7c:d5:f4:24:
         dc:40:d0:fc:5d:27:09:c1:1d:fb:3a:28:a1:37:62:2f:e8:11:
         2e:8d:56:df:74:9f:a4:f3:5c:66:ae:a9:0c:11:ad:0e:a4:e9:
         e4:44:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:21 2025 by rpki-client